$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/3a17fb61-c296-3a1b-8b14-94c026a4846e.roa File: 3a17fb61-c296-3a1b-8b14-94c026a4846e.roa (raw, json) Hash identifier: b4F3SRItrKgsO5S5tnFm+LtTUTGFs1QR1UnL5hy9MxI= Subject key identifier: 2D:06:C0:63:95:51:B4:95:34:E0:15:6B:9A:55:2F:7B:38:D3:CC:91 Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513 Certificate serial: 010D0C9F4328584EA79B3A25031BBD7FC9321C40 Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/3a17fb61-c296-3a1b-8b14-94c026a4846e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33392 IP address blocks: 167.254.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:3a:25:03:1b:bd:7f:c9:32:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=11adc27d-d0ab-4352-8492-5f4312781fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a3:2f:02:d6:70:bf:bf:bd:94:c0:9d:9b:4a: 81:fb:4b:96:f3:de:fb:28:0c:da:c0:0b:f6:a9:c7: 07:46:ba:e0:d4:dc:61:3a:f2:a6:7d:ca:44:0d:fd: f5:80:f1:31:20:aa:a4:5f:cb:c5:fb:f3:1a:3b:d3: bf:61:95:7e:e0:a8:67:fd:a6:06:46:2a:df:cf:60: e8:a5:65:f4:f8:73:64:b9:4c:18:16:71:ce:8f:0b: 4c:2f:fd:e8:4a:d2:b3:19:e0:a8:4c:bd:d7:64:35: 28:35:92:8a:88:28:ef:0a:17:44:cb:28:7c:59:a2: 44:0e:f2:dc:de:da:06:da:b2:8d:60:1b:92:46:73: 3f:c8:db:94:39:0b:e2:3d:f0:ff:c6:d4:a6:bf:83: 48:0e:a8:12:23:5c:ee:2e:5e:1a:78:26:45:09:00: 6a:bf:7f:d6:fc:ad:55:b6:16:00:f7:fa:e4:28:da: 31:0a:40:fd:0c:6a:e3:7e:8a:5a:11:da:1e:26:f8: bc:47:ba:b8:e5:4d:61:1c:d5:fb:91:57:a0:2b:3d: e3:04:e8:1b:36:ff:db:74:33:6c:31:e1:67:bb:c3: f4:96:9a:9d:85:83:a3:f6:b0:97:45:54:9a:d7:20: 51:6a:bf:df:25:f7:b9:32:d1:5e:37:e4:7b:da:31: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:06:C0:63:95:51:B4:95:34:E0:15:6B:9A:55:2F:7B:38:D3:CC:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/3a17fb61-c296-3a1b-8b14-94c026a4846e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl X509v3 Authority Key Identifier: keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer sbgp-ipAddrBlock: critical IPv4: 167.254.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ad:55:e0:8e:60:08:1b:66:1b:65:5f:2c:ad:c2:d9:e1:30: 4f:9d:c9:d4:34:cf:4f:25:64:54:1e:76:50:a5:90:b1:ef:09: 3a:ff:eb:fd:70:5d:63:2b:4b:49:c0:6e:be:38:02:04:a0:26: 9a:6b:b8:8c:a5:55:8b:51:66:7e:a3:22:40:af:82:82:31:15: d5:78:7c:4c:f6:4d:65:b0:21:53:5c:7a:fc:c9:71:b4:68:58: a4:1f:33:df:a4:ae:bf:44:9d:02:7b:50:5e:0d:5b:52:b8:25: 3e:28:52:3b:ed:2e:7c:a2:d0:c1:aa:de:36:4a:3b:88:99:af: e1:f0:e0:02:83:1b:1d:b8:e1:7c:02:5f:63:85:29:c5:e1:76: b6:82:20:b8:77:f1:28:19:72:ad:15:63:29:5a:40:d8:d0:7e: 4a:6c:48:59:04:33:dc:fd:40:b0:8f:27:87:61:01:a4:88:1a: 85:ff:d4:91:76:80:d5:fa:b5:67:d7:33:37:1c:43:ea:68:6f: cd:b7:ab:64:bf:20:94:56:83:39:21:7b:8f:59:19:df:6a:61: fd:3e:d3:63:50:79:97:6f:42:f0:4a:4d:4b:1f:6d:fd:2e:c7: 3d:ac:5a:56:e2:9c:0f:d8:ff:ca:83:7d:44:dd:b6:f1:75:75: 3c:8f:43:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmzolAxu9f8kyHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz NTEzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTFhZGMyN2QtZDBhYi00MzUyLTg0OTItNWY0MzEyNzgxZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aMvAtZwv7+9lMCdm0qB+0uW8977KAzawAv2 qccHRrrg1NxhOvKmfcpEDf31gPExIKqkX8vF+/MaO9O/YZV+4Khn/aYGRirfz2Do pWX0+HNkuUwYFnHOjwtML/3oStKzGeCoTL3XZDUoNZKKiCjvChdEyyh8WaJEDvLc 3toG2rKNYBuSRnM/yNuUOQviPfD/xtSmv4NIDqgSI1zuLl4aeCZFCQBqv3/W/K1V thYA9/rkKNoxCkD9DGrjfopaEdoeJvi8R7q45U1hHNX7kVegKz3jBOgbNv/bdDNs MeFnu8P0lpqdhYOj9rCXRVSa1yBRar/fJfe5MtFeN+R72jHBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0GwGOVUbSVNOAVa5pVL3s408yRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvM2ExN2ZiNjEtYzI5Ni0z YTFiLThiMTQtOTRjMDI2YTQ4NDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3 MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/77MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+tVeCOYAgbZhtlXyytwtnhME+dydQ0z08lZFQedlClkLHvCTr/6/1w XWMrS0nAbr44AgSgJppruIylVYtRZn6jIkCvgoIxFdV4fEz2TWWwIVNcevzJcbRo WKQfM9+krr9EnQJ7UF4NW1K4JT4oUjvtLnyi0MGq3jZKO4iZr+Hw4AKDGx244XwC X2OFKcXhdraCILh38SgZcq0VYylaQNjQfkpsSFkEM9z9QLCPJ4dhAaSIGoX/1JF2 gNX6tWfXMzccQ+pob823q2S/IJRWgzkhe49ZGd9qYf0+02NQeZdvQvBKTUsfbf0u xz2sWlbinA/Y/8qDfUTdtvF1dTyPQ9c= -----END CERTIFICATE-----Generated at Wed Jul 29 07:34:55 2026 by rpki-client